Risk assessment
Risks identified per role, with preventive measures and an owner.
Occupational risk prevention
Occupational safety: PPE, medical fitness and PRL, per employee
Risk assessment per role, PPE issuance and expiry, medical fitness records and PRL training, with accident and incident investigation tracked per employee. All in the same portal where employees already clock in.
What it covers and which standard it follows
Occupational health and safety rests on four records that almost always live apart: the risk assessment by role, the issue of personal protective equipment, each worker's fitness for work and their specific training. Kimobox keeps them on the same personnel record with expiry dates watched, so the preventive plan stops being a document updated when an audit looms and becomes a state you can check at any moment.
- Framework law in Spain
- Law 31/1995 of 8 November Developed by RD 39/1997, the Prevention Services Regulation
- Protective equipment
- Royal Decree 773/1997 Requires issuing suitable PPE, training in its use and replacing it when it loses effectiveness
- Health surveillance
- Art. 22 of Law 31/1995 Voluntary except in listed cases; what reaches the employer is fitness, never a diagnosis
- International standard
- ISO 45001:2018 With Amd 1:2024 on climate change
- Very serious penalty
- Up to 983,736 euros Top band of art. 40.2 LISOS after the Law 12/2022 update
PPE and expiry
Personal protective equipment issuance with a signed receipt and alerts before it expires.
Medical fitness
Check-ups and medical fitness records per employee and role, with alerts before they expire.
PRL training and information
Mandatory prevention courses with monitored expiry and automatic alerts.
Accident investigation
Root cause, corrective measures and closure for every accident or incident logged.
Coordination of activities (CAE)
PRL documentation from contractors and subcontractors is validated before entering the plant.
+ infoWhat it tracks
From risk assessment to accident investigation
- Risk assessment per role
- PPE issuance and expiry with employee acknowledgment
- Medical fitness records with alerts before they expire
- PRL training and information with monitored expiry
- Accident and incident investigation with root cause
- Coordination of activities with contractors and subcontractors
Reference standard
Aligned with ISO 45001
The occupational safety module covers the risk management, PPE, medical fitness and accident investigation requirements of the ISO 45001 occupational health and safety management standard.
- Risk assessment and preventive planning
- Worker participation and consultation
- Accident investigation with root cause
External staff
Safety doesn't stop at your own workforce
The same PRL documentation —training, medical fitness and PPE— is also required from contractors and subcontractors before their access to the plant is authorized, through the coordination of activities module.
- PRL documentation validated before plant access
- Expiry also monitored for external staff
- Evidence for article 24 of the Spanish LPRL
Regulatory framework
The reference authority in prevention
Real examples
The three classic gaps
Chemicals
PPE issued without a trace
Before A warehouse note signed by hand and filed. If there is an accident, proving the right equipment was issued on the right date costs an afternoon in the archive.
After Issue recorded per worker with the equipment reference, the date, the signature on a tablet and the replacement date. The system warns before it expires.
Food industry
Fitness certificates lapsing unnoticed
Before The prevention service sends a PDF list once a year. Between lists, nobody knows who has stopped being fit for work.
After Fitness with a validity date on the worker record. Once it lapses the person no longer shows as authorised for the role, and the manager sees it before assigning the shift.
Construction
Accident investigation that stops at the form
Before The official report is completed and that is that. Root cause is not analysed and the corrective action, if there is one, is never verified.
After Investigation with root cause, a corrective action owned by someone with a deadline, and later effectiveness verification, linked to the role and to the risk assessment that needs revising.
Vocabulary
Prevention vocabulary
- Risk assessment
- The process of identifying the hazards of each role, estimating their magnitude and deciding whether they are tolerable. Everything else hangs off this document, which must be revised when conditions change.
- Preventive planning
- The set of measures derived from the assessment, each with an owner, a deadline and assigned resources. Without those, it is a list of good intentions.
- PPE
- Personal protective equipment. The last resort in the prevention hierarchy: first eliminate the hazard, then protect collectively, and only then reach for personal equipment.
- Fitness for work
- The conclusion the health surveillance service communicates to the employer: fit, fit with limitations, or not fit for a specific role. The employer receives no clinical data.
- Root cause
- The underlying reason an accident happened, beyond the immediate event. If the investigation stops at "the worker was careless", the corrective action will not prevent a repeat.
Frequently asked questions
What people ask us before getting started
Does it replace the prevention service?
No, it's the tool your in-house or external prevention service uses to log risk assessment, PPE, medical fitness and accidents.
How do you get notified before a PPE or medical fitness record expires?
The platform sends an automatic alert to the employee and their manager before the expiry date.
Does it connect with access control?
Yes, if a medical fitness record or PRL training expires, the employee's access can be blocked automatically.
Does it also work for suppliers and subcontractors?
Yes, through the coordination of activities (CAE) module, with the same documentation and expiry logic.
What medical information does the system hold?
Only fitness and its validity date: fit, fit with limitations or not fit. No clinical data. The diagnosis belongs to the health surveillance service and should never reach the employer.
Does it help prepare for ISO 45001 certification?
Yes. It covers the operational clauses — hazard identification, competence, communication, incident investigation and corrective actions — and leaves the records the auditor asks for without extra collection work.
Can near misses be recorded?
Yes, and they should be. A no-injury incident that is recorded and analysed is the cheapest information a company can get about an accident that has not happened yet.
How do you prove the right PPE was issued?
Each issue stores the equipment reference, the date, the worker, the receipt signature and the planned replacement date. It is a record per worker, not a warehouse note.
Can the risk assessment be imported from the prevention service?
Yes. The existing assessment is imported and each risk is linked to its role, its preventive measures and the associated training, so a change of role pulls through what it should.
Show us your current risk and PPE matrix
We'll show you the module running with data similar to yours.
Keep exploring
Related pages
No paperwork in order, no access to the site
Contractor coordination with company, worker and equipment documentation validated before access, and expiry…
Who gets in, where and when, with no guard at the door
Access authorization to the plant or office per employee, with card, PIN or biometrics, automatically…
Training and performance evaluation, without spreadsheets
Courses and certifications with expiry tracking, and performance evaluation with objectives and follow-up…
ISO 45001, without folders or surprises
Risk assessment, training, PPE, accidents and investigations, with traceability by employee.
Sources
Where each figure comes from
References to the official text in force. If a standard is revised, this page is updated and the review date says so.
- Ley 31/1995 of 8 November on the prevention of occupational risks BOE-A-1995-24292 · Consolidated text
- Royal Decree 39/1997, Prevention Services Regulation BOE-A-1997-1853 · Consolidated text
- Royal Decree 773/1997 on the use of personal protective equipment BOE-A-1997-12735 · Consolidated text
- ISO 45001:2018 — Occupational health and safety management systems ISO · 2018 ed., with Amd 1:2024
Occupational safety, PRL and PPE software
Kimobox's occupational safety module manages risk assessment per role, the issuance and expiry of personal protective equipment (PPE), medical fitness records, and occupational risk prevention (PRL) training and information, with automatic alerts before every expiry.
Accident and incident investigation is logged with root cause, corrective measures and an owner, aligned with the requirements of the ISO 45001 occupational health and safety management standard.
The same PRL documentation is also required from contractors and subcontractors through the coordination of business activities (CAE) module, so occupational safety doesn't stop at your own workforce.